Re: Access Denied for manager

Administrator

On 18/04/18 08:50, James Moe wrote:
> Hello,
> squid v3.5.21
> linux v4.4.120-45-default x86_64
>
> The "manager" is suddenly denied access. I am not aware of any recent
> updates. This did work 3 days ago.
> Is the ACL correct?

Maybe, maybe not.

>
> acl manager_admin src 192.168.69.115

Yet you have two other localnet ranges this machine can potentially be
part of:

To get any type of access to Squid internal resources working properly
you need both Squid and the external tools to be aware of what its
machines host name is AND that hostname to be publicly resolvable -
meaning it also has to be an FQDN.

- for the icons ANY receiving Squid can (and usually will) respond if
it has the relevant icon.

- for manager reports ONLY the individual proxy targeted by the URL
will respond with a successful report. The reasons for that should be
obvious.

Be aware that any tools running on the localhost will probably still use
the machines hostname and may now appear to be broken when they "worked"
before. Those directives in squid.conf are _workarounds_ not fixes.

Re: Access Denied for manager

On 04/19/2018 12:15 AM, Amos Jeffries wrote:

> I see you have a forwarding loop:
>
> 192.168.69.115 -> Squid -> 192.168.69.246 -> Squid -> DENIED.
>
> That 192.168.69.115 is trying to fetch "http://proxy1.sma.com". But the
> Squid appears to think its hostname is "sma-server3".
>
Ah.
It would seem the proxy configuration for opensuse LEAP 42.3 is a bit,
um, defective. I have the local domain listed as do-not-proxy; yet it
does anyway.
Using a browser with the same proxy configuration, a manual config,
works correctly.